last executing test programs: 11.133527297s ago: executing program 2 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="830cfb4619cbe709101eee0f6f4531b343c73342821f5321711d66d2e55722c9af1c0d2303f3a7b99a8fe00deec02022c38447b388beb45b411efc7346866dcf2bcf7f206893", @ANYRESHEX=r0, @ANYBLOB="01000100000000000000100000001800018014000200776c616e3100000000000000000000000800080001000100"], 0x34}}, 0x24008085) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000300)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87ed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efcc4e20191542fcbb805000000b9210000000f01c1c4e17929d8", 0x4f}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40000040, @mcast2, 0x8}, 0x1c) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(r0, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000b40)="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", 0x118}, {&(0x7f0000000600)="80821f8d953ee6f421e5e673b7ad2ac4baa2fea03a54b6a6db28b6bd35d05563ce7fa284d5471a974f03eb1e5d47108ed849a490022827ec3e93221166137516755dc2bfd7f01676ecfe30a518487376c1e3f570f11e29fa22a08a6509c189c06fcfb0c152e93bbddae139ed4d1ca3ee09dcf5f1354c0ff1747fa4a71c24261bc632511c4b8ef2e774fff26d34d21a6b5f", 0x91}, {&(0x7f0000000980)="cccc7f558574766d63f44060da57cd939a2be25b3ef29eb3da7c876f1549f6c6ba2ad44115792000f160dd2f829a1ef13e2e46d9a1bc6c93e3625c3f7a5572689e618a86ca6141fa4cd1312cda018e5f763d74715a0b8de7a1a7251997b36e74a7bd380ce81316be26eeedae6fc2b65edd6717334f836afc7388e7adb46e884fb871794ffd4e825d2e715d037dd726d4025a5acaa33b94075ed01a06935fceb12307316431658c7d1c1b4c1a9257c5a1ceb6b940f362cb7b09da4b40ef4f49", 0xbf}], 0x4}, 0x41) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r6, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86", 0xdf}], 0x1, 0x0, 0x0, 0x40800}], 0x1, 0x48040) r7 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(r9, &(0x7f0000000500)=[{&(0x7f0000002840)="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", 0x1010}], 0x1, 0x2001, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.079150025s ago: executing program 2 (id=355): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x89) prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000900, 0x0, &(0x7f00000000c0)={0xe, 0x0, 0x80000000, 0x0, 0x0, 0x6, 0x0, 0x3ff, 0x10}) r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xa, 0x8580) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x4, 0x0, 0x10000, 0x3e12, 0x1}) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f0000000200)=""/209, 0xd1}, {&(0x7f0000000040)=""/31, 0x1f}], 0x5}, 0x400000}, {{0x0, 0x0, 0x0}}], 0x4, 0x30100, 0x0) 5.829157251s ago: executing program 1 (id=358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) 5.168287997s ago: executing program 2 (id=361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x80002, 0x0) sendmsg(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfffffe01, 0xffffffffffffffff, 0x1, 0x6b9f}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x7, 0x3, @void}]}]}, {0x4, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) listen(r3, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="89000000993987e794519000000000"], 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "038c08", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x20048880) 4.413415215s ago: executing program 3 (id=363): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x2000006, 0x40010, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x85}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) fcntl$dupfd(r2, 0x406, r2) (async) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x4008af14, &(0x7f0000002500)) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f0000000840)={0x60, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800000, 0x13, r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f0000000d80)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f0000000d80)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r4], 0x1}, 0x58) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="580000001000030500000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000100000001000000ff12800c0001006d6163766c616e48bf0000081dfe48a45811e3480d7d0b050d2d00010010000000040005800800"], 0x58}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_icmp(0x2, 0x2, 0x1) (async) r8 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r8, 0x0, 0x0, 0x48d0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000007c0)=@nfc_llcp={0x27, r9, 0x1, 0x2, 0x24, 0x0, "b2bd5667fe04181ecbb10df29fab7d25e6ae013592216ef2d7884972b012607c013cb5f3842ae23d1d635d8942c2f0b11a8b90af348f7af73b6e674321d069", 0x3}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a40)="30b84c088276074b99dea21a4d36d7a8c0ab741c51681e149510d30fa9abb4fb769b3cd4a8df0c37e02f8af93d4374836a40839e9f2a55629c44981cece8ee7e759d8b2d71996ff167c10295ccd343a1eb4638c4975af44767220399df7722772b88b33081a779c2dcc13d68de2bc62119c4511aed48f54c3f56bab66c21f4ba22d61442e60aa673821afc969f5e07b30a68ed0695d7ba653e34c15d94844f1537a7ceeb0e59eaeea646e011fa8417cf86bac9becd484f092482ea3b378179c185edd16357e086bae504f98313076f4f1cc4c0ad522a45", 0xd7}, {&(0x7f0000000ec0)="7c23d8845c758b6cadb4f178c11821d153dfb119e25b323810572d735a185c9d25218fee1e6f705c23d9767779035a67b89b387fa7353444e9f740239d28864b90dd69c20cf17c0f78d077e8dc000a46b4e7ecfc99ae7d672086202e0eb0d5c63301ea9f59aeef93113a12fc02f20295f4c037f1f8eaa746e8f21c52c0fae5", 0x7f}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x48}, 0x8a1) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r7, 0x9) socket$inet_sctp(0x2, 0x5, 0x84) (async) r10 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r10, &(0x7f0000000c00)="ab", 0x1, 0xc1, &(0x7f0000000280)={0x2, 0x4e1e, @loopback}, 0x10) readv(r5, &(0x7f0000000b40)=[{&(0x7f00000003c0)=""/138, 0x8a}, {&(0x7f0000000500)=""/184, 0xb8}, {&(0x7f0000000900)=""/140, 0x8c}, {&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f00000006c0)=""/209, 0xd1}, {&(0x7f00000033c0)=""/4089, 0xff9}, {&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f00000043c0)=""/4098, 0x1002}, {&(0x7f0000000100)=""/161, 0xa1}, {&(0x7f00000009c0)=""/84, 0x54}, {&(0x7f00000005c0)=""/199, 0xc7}], 0xc) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) (async) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) r11 = syz_open_procfs(0x0, &(0x7f0000000040)) read$FUSE(r11, &(0x7f0000002100)={0x2020}, 0x790) (async) read$FUSE(r11, &(0x7f0000002100)={0x2020}, 0x790) 4.223800655s ago: executing program 1 (id=364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) recvmmsg(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0xd105}], 0x1, 0x12102, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c000180060006008035"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3.886447486s ago: executing program 2 (id=365): r0 = syz_open_dev$usbfs(&(0x7f00000005c0), 0xc, 0x100) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x1f3) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000040)) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}}, 0x0) landlock_restrict_self(r2, 0xe) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0}, 0x0) 3.510371327s ago: executing program 0 (id=368): mount(&(0x7f0000000040)=@rnullb, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='efivarfs\x00', 0x84848, 0x0) mount(&(0x7f0000000040)=@rnullb, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='efivarfs\x00', 0x84848, 0x0) (async) 3.379663997s ago: executing program 2 (id=369): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!\x00'], 0x48) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000102000/0x1000)=nil, 0x1000) syz_clone3(&(0x7f000000dd80)={0x41200480, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0xce2f, 0x0) setuid(0xee01) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00005f2000/0x3000)=nil, &(0x7f0000381000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000203000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) (async) r2 = io_uring_setup(0x4756, &(0x7f0000000580)={0x0, 0xf8b8, 0xc000, 0x0, 0x3a8}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="150a00000000000079b0480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x1679c0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000540)=0x80000000, 0x800, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r5, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000004c0)={0x4, 0x0, 0x1000011, 0x8, 0x100, &(0x7f00000000c0)="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"}) (async) syz_memcpy_off$KVM_EXIT_MMIO(r6, 0x40000, &(0x7f0000000100)="020000000000000000000000000000000200", 0x0, 0x50) (async) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) (async) fcntl$setpipe(r4, 0x407, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./bus\x00', 0x180) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$tcp_congestion(r7, &(0x7f0000000180)='scalable\x00', 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.374608698s ago: executing program 0 (id=370): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x2, 0x4, 0xff, 0x4000, 0xffffffffffffffff}) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000040)='.)/+\x00') sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 3.064885487s ago: executing program 0 (id=371): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$inet6(0xa, 0x80000, 0x3) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffc}, 0xc) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xe, &(0x7f0000000000)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x435}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x8c}, @map_fd={0x18, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, &(0x7f0000000180), 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x6, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x2, 0xe, 0x4}, {0x2, 0x4, 0xb, 0x9}, {0x0, 0x3, 0x1}, {0x2, 0x4, 0xa, 0xb}, {0x0, 0x2, 0xc, 0x5}]}, 0x94) statx(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x60000, &(0x7f0000000900)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions}, {@blksize}, {@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0xc00}}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fsmagic={'fsmagic', 0x3d, 0x10001}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ip6tnl0\x00'}}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0x6}}]}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0xb4, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4000000000000008, 0x800000089}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r3, r1, 0x25, 0x2, @val=@tracing={r5, 0x6}}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x42}, 0x2000401c) 2.692034884s ago: executing program 1 (id=372): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='/dev/mapper/control', 0x13) lseek(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0xffffffff, 0x4) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000003c0)={@host, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000210) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80a42, 0x47) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c94e2357f0000000400000003000000000000110000000000000000"], 0x0, 0x28, 0x0, 0x1}, 0x20) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='P2000.L'], 0x15) read(r0, &(0x7f0000000100), 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000180)) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='temp_file\x00', 0x2000, 0x8) mknodat(r4, &(0x7f0000000380)='temp_file\x00', 0x8000, 0x3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r7, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r6, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) close_range(r5, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r8, 0xc138fd00, &(0x7f0000000240)="039708a37d695e3e0361a01ee271e09fd21a9aeaa9beffbc496e58fe4b5ad1d605e5f418fcfa3d26679c1d6a35d639ba5013402eca335bbdf417c19c8eb626d5f60be0fb891cf453733bf8ca0f81f15b776093298f135736945c64abe215930036b05488c2d1723e633cd7339cc86d0ffe5a9f1c78ee144bc25e45d098c6e0b6c692f2ed8ecce43c1d7cb6aa1af095f84a0a650bfc50c05598236bace21e560d2e8f3434aa6aa6cf21e05b73ed9d1f763cef677ecd24fe172ebc94f82615fa1d7be7099aeeda1f7ff4ac218a16a50d41f440df81abc304795db0943c7d4d07") 2.559530325s ago: executing program 3 (id=373): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfdce, &(0x7f00000001c0)={&(0x7f00000002c0)=@delnexthop={0x50, 0x69, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{0x0, 0x1, 0x2}, {0x0, 0x1, 0x2}, {0x0, 0x1, 0x2}, {0x0, 0x1, 0x2}, {0x0, 0x1, 0x1}, {0x0, 0x1, 0x2}]}, 0xa2}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e0404260c"], 0x7) 2.485320356s ago: executing program 1 (id=374): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x30, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfd, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x3a5800, 0x88) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000080)={0x40, 0x17, 0x5, 0x4, 0x42, 0x5ff2, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000006000000000000001000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000b73c138ddea6465b0031d46c3092e4349e03aa88c77cb3771b7d99fad202868575007b1823bd5c1491f477de896e2baffc207e96f07ed507b45ac24000b89d28ec603b4f76dc977af7ca3657415c7a54e3bb59aeb6a48e46ed1bdd6c65d3337f3ddb828fae19980dc4b880b75182abbe574306a8e0ee5d461fee4a52c8a414a789052030d72a8591b3ebef0216512ffb443f94ea2ab54fa9b7e7feaaa35b299822", @ANYRES32=r6, @ANYBLOB="00000000be0000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0x1, 0x9, 0x8}, 0x10, 0x71e0, r0, 0x7, 0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x3, 0xa}, {0x5, 0x1, 0xf, 0x3}, {0x2, 0x1, 0xe, 0x1}, {0x2, 0x1, 0x3, 0x4}, {0x5, 0x2, 0xc, 0xc}, {0x3, 0x5, 0xf, 0x4}, {0x1, 0x7, 0xd, 0xa}], 0x10, 0xfffffff8}, 0x94) 2.273732098s ago: executing program 3 (id=375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000026000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0xdddd1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="0f01c3b805000000b9c9c700000f01c1c4c3b17841f56a3e640f0666ba610066edc4e26d8c424166baa10066b865a966ef64d488670fc76800c4e22937050d000000", 0x42}], 0x33, 0x4c, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x40000, 0xf000}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r5, 0x4068aea3, &(0x7f00000003c0)={0xcc, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.706875144s ago: executing program 3 (id=376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffedb) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x2, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r4) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r5, 0x421, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048000}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f0000000840)=[{&(0x7f0000000100)=""/157, 0x9d}, {&(0x7f0000000240)=""/82, 0x52}, {&(0x7f00000002c0)=""/49, 0x31}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/116, 0x74}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000740)=""/243, 0xf3}], 0x7, 0x9, 0x9) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000540)=@req={0x7, 0x3, 0x1, 0xfffffffc}, 0x10) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r8) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r8, 0x80085502, &(0x7f0000000500)) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="0504"], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 1.20294082s ago: executing program 1 (id=377): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r2, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c80)=""/166, 0xa6}], 0x1}}], 0x1, 0x40000041, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="0380c2000022aaaaaaaaaabb81003200080600010800060400020180c2000003e0000001ffffffffffff64010100"], 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="2ef20f0131b9000000800f01c1857af564d891de98045bb9df0200000f32420f63dec4a3c15f83b13700000066b837000f00d88ed066b8dd008ee866baf80cb862747b86ef0f01d166edf3410f598e00000100", 0x53}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xb9, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r9, 0xae80, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) listen(r0, 0x5) r10 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r10, &(0x7f0000000800)={0x2, 0x1f90, @loopback}, 0x10) 1.201805062s ago: executing program 0 (id=378): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x100000) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) (async) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 1.077274719s ago: executing program 0 (id=379): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x40040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x40040, 0x0) (async) 918.470022ms ago: executing program 0 (id=380): socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r7, r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f0000000180)={0x2e, 0x68, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = socket(0x10, 0x3, 0x0) recvmmsg(r8, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x2000, 0x0) syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0) 413.07554ms ago: executing program 3 (id=381): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = io_uring_setup(0x666, &(0x7f0000000000)={0x0, 0xdbfb, 0x8, 0x2, 0x235}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) close_range(r1, 0xffffffffffffffff, 0x0) close_range(r2, r1, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1407, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x60}]}, 0x18}}, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 175.923111ms ago: executing program 3 (id=382): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x41, 0x0) write(r2, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r5, &(0x7f0000000180)=@file={0x1}, 0x6e) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x5, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x5, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x2) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0xfe0f}, 0x0) 145.079103ms ago: executing program 2 (id=383): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e0404260c"], 0x7) 0s ago: executing program 1 (id=384): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x301800) ioctl$VIDIOC_S_MODULATOR(r0, 0x80085665, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000200)={0x5, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], 0x0, r2, 0x0, '\x00', 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:46950' (ED25519) to the list of known hosts. [ 48.784344][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 48.784359][ T42] audit: type=1400 audit(1785577946.265:141): avc: denied { mounton } for pid=5724 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.797624][ T42] audit: type=1400 audit(1785577946.285:142): avc: denied { mount } for pid=5724 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.799764][ T5724] cgroup: Unknown subsys name 'net' [ 48.809837][ T42] audit: type=1400 audit(1785577946.295:143): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.972521][ T5724] cgroup: Unknown subsys name 'cpuset' [ 48.978933][ T5724] cgroup: Unknown subsys name 'rlimit' [ 49.135383][ T42] audit: type=1400 audit(1785577946.615:144): avc: denied { setattr } for pid=5724 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.143863][ T42] audit: type=1400 audit(1785577946.615:145): avc: denied { create } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.151197][ T42] audit: type=1400 audit(1785577946.615:146): avc: denied { write } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.158325][ T42] audit: type=1400 audit(1785577946.615:147): avc: denied { read } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.165574][ T42] audit: type=1400 audit(1785577946.635:148): avc: denied { mounton } for pid=5724 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.174731][ T42] audit: type=1400 audit(1785577946.635:149): avc: denied { mount } for pid=5724 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.182737][ T42] audit: type=1400 audit(1785577946.635:150): avc: denied { read } for pid=5451 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.211667][ T5728] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 50.161471][ T5724] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.846193][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 53.846209][ T42] audit: type=1400 audit(1785577951.325:158): avc: denied { execmem } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 54.068872][ T42] audit: type=1400 audit(1785577951.555:159): avc: denied { create } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.079898][ T42] audit: type=1400 audit(1785577951.555:160): avc: denied { read write } for pid=5738 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.089452][ T42] audit: type=1400 audit(1785577951.555:161): avc: denied { open } for pid=5738 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.102348][ T42] audit: type=1400 audit(1785577951.555:162): avc: denied { ioctl } for pid=5738 comm="syz-executor" path="socket:[6513]" dev="sockfs" ino=6513 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.110390][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.118130][ T5751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.123043][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.126244][ T5751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.129440][ T5751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.133336][ T5751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.136138][ T5751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.138855][ T5751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.141899][ T5751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.142261][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.146430][ T5751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.150261][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.150955][ T5754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.151166][ T5751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.151877][ T5751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.155942][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.156435][ T5752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.156986][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.167641][ T42] audit: type=1400 audit(1785577951.645:163): avc: denied { read } for pid=5739 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.175156][ T42] audit: type=1400 audit(1785577951.645:164): avc: denied { open } for pid=5739 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.175873][ T5744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.182110][ T42] audit: type=1400 audit(1785577951.645:165): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 54.186418][ T5744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.192105][ T42] audit: type=1400 audit(1785577951.655:166): avc: denied { module_request } for pid=5739 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 54.202746][ T42] audit: type=1400 audit(1785577951.675:167): avc: denied { sys_module } for pid=5742 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.773863][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.777641][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.781015][ T5739] bridge_slave_0: entered allmulticast mode [ 54.784882][ T5739] bridge_slave_0: entered promiscuous mode [ 54.812143][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.814905][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.817536][ T5739] bridge_slave_1: entered allmulticast mode [ 54.820744][ T5739] bridge_slave_1: entered promiscuous mode [ 54.839011][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.841493][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.844057][ T5738] bridge_slave_0: entered allmulticast mode [ 54.848258][ T5738] bridge_slave_0: entered promiscuous mode [ 54.858818][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.861748][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.864705][ T5738] bridge_slave_1: entered allmulticast mode [ 54.870960][ T5738] bridge_slave_1: entered promiscuous mode [ 54.906386][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.917873][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.995793][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.000982][ T5739] team0: Port device team_slave_0 added [ 55.005600][ T5739] team0: Port device team_slave_1 added [ 55.033562][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.102529][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.105318][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.115915][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.121528][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.124637][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.127981][ T5747] bridge_slave_0: entered allmulticast mode [ 55.131895][ T5747] bridge_slave_0: entered promiscuous mode [ 55.136313][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.139262][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.142081][ T5742] bridge_slave_0: entered allmulticast mode [ 55.145864][ T5742] bridge_slave_0: entered promiscuous mode [ 55.162237][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.165026][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.175331][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.180903][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.184235][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.187458][ T5747] bridge_slave_1: entered allmulticast mode [ 55.191356][ T5747] bridge_slave_1: entered promiscuous mode [ 55.195524][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.199125][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.202165][ T5742] bridge_slave_1: entered allmulticast mode [ 55.206006][ T5742] bridge_slave_1: entered promiscuous mode [ 55.211628][ T5738] team0: Port device team_slave_0 added [ 55.216066][ T5738] team0: Port device team_slave_1 added [ 55.278416][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.280676][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.288642][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.303710][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.310417][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.314440][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.316555][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.324702][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.331186][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.376381][ T5739] hsr_slave_0: entered promiscuous mode [ 55.379883][ T5739] hsr_slave_1: entered promiscuous mode [ 55.385729][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.403259][ T5742] team0: Port device team_slave_0 added [ 55.408189][ T5742] team0: Port device team_slave_1 added [ 55.450751][ T5747] team0: Port device team_slave_0 added [ 55.464345][ T5747] team0: Port device team_slave_1 added [ 55.498534][ T5738] hsr_slave_0: entered promiscuous mode [ 55.501298][ T5738] hsr_slave_1: entered promiscuous mode [ 55.503409][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 55.505281][ T5738] Cannot create hsr debugfs directory [ 55.507982][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.510190][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.518086][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.554724][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.557027][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.564918][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.569061][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.571911][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.582673][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.622088][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.624946][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.635376][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.703563][ T5742] hsr_slave_0: entered promiscuous mode [ 55.705830][ T5742] hsr_slave_1: entered promiscuous mode [ 55.707950][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 55.709771][ T5742] Cannot create hsr debugfs directory [ 55.815002][ T5747] hsr_slave_0: entered promiscuous mode [ 55.818329][ T5747] hsr_slave_1: entered promiscuous mode [ 55.821306][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 55.823695][ T5747] Cannot create hsr debugfs directory [ 56.031288][ T5739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.042653][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.047599][ T5739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.054073][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.062568][ T5739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.068560][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.076744][ T5739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.083218][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.151910][ T5738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.159901][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.163745][ T5738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.170553][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.174238][ T5738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.181114][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.185217][ T5738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.191981][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.208792][ T5741] Bluetooth: hci1: command tx timeout [ 56.216972][ T5741] Bluetooth: hci2: command tx timeout [ 56.218188][ T5744] Bluetooth: hci0: command tx timeout [ 56.251227][ T5742] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.260343][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.264039][ T5742] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.269396][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.273373][ T5742] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.279125][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.286556][ T5742] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.290888][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.297280][ T5744] Bluetooth: hci3: command tx timeout [ 56.361278][ T5747] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.365199][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.368831][ T5747] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.372632][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.377060][ T5747] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.381856][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.385109][ T5747] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.389510][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.398520][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.441163][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.457508][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.460542][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.477242][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.479927][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.495047][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.519790][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.528413][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.530774][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.536071][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.557519][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.559974][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.574518][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.592714][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.595051][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.608634][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.610956][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.615929][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.641066][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.664032][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.667122][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.675610][ T122] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.678187][ T122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.822328][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.853338][ T5739] veth0_vlan: entered promiscuous mode [ 56.861872][ T5739] veth1_vlan: entered promiscuous mode [ 56.884786][ T5739] veth0_macvtap: entered promiscuous mode [ 56.893948][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.899814][ T5739] veth1_macvtap: entered promiscuous mode [ 56.912102][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.921734][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.942101][ T5738] veth0_vlan: entered promiscuous mode [ 56.950573][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.961925][ T5738] veth1_vlan: entered promiscuous mode [ 56.965795][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.989473][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.029876][ T5738] veth0_macvtap: entered promiscuous mode [ 57.048756][ T5747] veth0_vlan: entered promiscuous mode [ 57.052858][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.055914][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.058801][ T5738] veth1_macvtap: entered promiscuous mode [ 57.070766][ T5747] veth1_vlan: entered promiscuous mode [ 57.109504][ T122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.110690][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.112075][ T122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.116210][ T5742] veth0_vlan: entered promiscuous mode [ 57.123890][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.128214][ T5742] veth1_vlan: entered promiscuous mode [ 57.142854][ T5747] veth0_macvtap: entered promiscuous mode [ 57.158309][ T5739] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.158846][ T5747] veth1_macvtap: entered promiscuous mode [ 57.176776][ T5791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.201426][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.223427][ T5742] veth0_macvtap: entered promiscuous mode [ 57.231209][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.245165][ T5742] veth1_macvtap: entered promiscuous mode [ 57.256307][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.260486][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.267451][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.286435][ T122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.290138][ T122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.294626][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.309118][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.346931][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.378071][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.383428][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.397120][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.424363][ T5896] fuse: Bad value for 'fd' [ 57.427657][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.430565][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.430657][ T122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.436731][ T122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.467647][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.469601][ T5898] overlay: Unknown parameter 'pcr' [ 57.472784][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.502114][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.507770][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.526976][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.530063][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.533873][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.538384][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.541249][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.544584][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.549264][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.552778][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.559456][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.563764][ T5903] netlink: 'syz.3.7': attribute type 13 has an invalid length. [ 57.680977][ T5908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5908 comm=syz.3.9 [ 57.720722][ T5916] 9pnet_virtio: no channels available for device 127.0.0.1 [ 57.792836][ T5925] ======================================================= [ 57.792836][ T5925] WARNING: The mand mount option has been deprecated and [ 57.792836][ T5925] and is ignored by this kernel. Remove the mand [ 57.792836][ T5925] option from the mount to silence this warning. [ 57.792836][ T5925] ======================================================= [ 57.797988][ T5922] loop3: detected capacity change from 0 to 7 [ 57.813668][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.815078][ T5924] overlayfs: overlapping lowerdir path [ 57.816866][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.822018][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.827241][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.831581][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.834670][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.837061][ T5924] overlayfs: maximum fs stacking depth exceeded [ 57.837662][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.842957][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.846210][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.846727][ T5924] overlayfs: maximum fs stacking depth exceeded [ 57.849921][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.854144][ T5926] netlink: 232 bytes leftover after parsing attributes in process `syz.1.12'. [ 57.854712][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.858259][ T5924] overlayfs: maximum fs stacking depth exceeded [ 57.860214][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.863944][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.868390][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.870886][ T5922] ldm_validate_partition_table(): Disk read failed. [ 57.873228][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.876285][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.879824][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.883503][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.887033][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.890747][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.895750][ T5922] Dev loop3: unable to read RDB block 0 [ 57.902514][ T5922] loop3: unable to read partition table [ 57.908844][ T5922] loop3: partition table beyond EOD, truncated [ 57.913298][ T5922] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 57.964168][ T5933] bridge0: port 3(syz_tun) entered blocking state [ 57.972058][ T5933] bridge0: port 3(syz_tun) entered disabled state [ 57.977293][ T5933] syz_tun: entered allmulticast mode [ 57.981930][ T5933] syz_tun: entered promiscuous mode [ 57.986269][ T5933] bridge0: port 3(syz_tun) entered blocking state [ 57.988793][ T5933] bridge0: port 3(syz_tun) entered forwarding state [ 58.023549][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 58.027813][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'. [ 58.030564][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 58.039297][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 58.042068][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'. [ 58.044838][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 58.049212][ T5938] Zero length message leads to an empty skb [ 58.071691][ T5791] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.076212][ T5791] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.079386][ T5791] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.082337][ T5791] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.251789][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 58.259152][ T5956] syz.0.18 uses obsolete (PF_INET,SOCK_PACKET) [ 58.287726][ T5744] Bluetooth: hci2: command tx timeout [ 58.289846][ T5744] Bluetooth: hci1: command tx timeout [ 58.298832][ T5744] Bluetooth: hci0: command tx timeout [ 58.318504][ T5956] support for cryptoloop has been removed. Use dm-crypt instead. [ 58.345992][ T5958] 9p: Bad value for 'rfdno' [ 58.411360][ T5964] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 58.662214][ T5952] Bluetooth: hci4: Frame reassembly failed (-84) [ 58.668692][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 58.827816][ T5979] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 58.956903][ T42] kauditd_printk_skb: 101 callbacks suppressed [ 58.956915][ T42] audit: type=1400 audit(1785577956.435:269): avc: denied { create } for pid=5983 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.964901][ T42] audit: type=1400 audit(1785577956.445:270): avc: denied { setopt } for pid=5983 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.023281][ T42] audit: type=1400 audit(1785577956.505:271): avc: denied { read } for pid=5991 comm="syz.1.27" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.032388][ T42] audit: type=1400 audit(1785577956.505:272): avc: denied { open } for pid=5991 comm="syz.1.27" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.062956][ T42] audit: type=1400 audit(1785577956.545:273): avc: denied { ioctl } for pid=5991 comm="syz.1.27" path="/dev/usbmon0" dev="devtmpfs" ino=738 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.073093][ T42] audit: type=1400 audit(1785577956.545:274): avc: denied { name_bind } for pid=5991 comm="syz.1.27" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 59.081191][ T42] audit: type=1400 audit(1785577956.545:275): avc: denied { node_bind } for pid=5991 comm="syz.1.27" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 59.094391][ T42] audit: type=1400 audit(1785577956.575:276): avc: denied { create } for pid=5994 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 59.160598][ T42] audit: type=1400 audit(1785577956.645:277): avc: denied { create } for pid=6000 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 59.168992][ T42] audit: type=1400 audit(1785577956.645:278): avc: denied { bind } for pid=6000 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 59.249521][ T6015] /dev/nullb0: Can't open blockdev [ 59.252679][ T6015] /dev/nullb0: Can't open blockdev [ 59.254819][ T6015] /dev/nullb0: Can't open blockdev [ 59.258004][ T6015] /dev/nullb0: Can't open blockdev [ 59.260125][ T6015] /dev/nullb0: Can't open blockdev [ 59.262089][ T6015] /dev/nullb0: Can't open blockdev [ 59.263947][ T6015] /dev/nullb0: Can't open blockdev [ 59.265809][ T6015] /dev/nullb0: Can't open blockdev [ 59.268488][ T6015] /dev/nullb0: Can't open blockdev [ 59.270540][ T6015] /dev/nullb0: Can't open blockdev [ 59.272403][ T6015] /dev/nullb0: Can't open blockdev [ 59.274272][ T6015] /dev/nullb0: Can't open blockdev [ 59.276128][ T6015] /dev/nullb0: Can't open blockdev [ 59.278376][ T6015] /dev/nullb0: Can't open blockdev [ 59.280341][ T6015] /dev/nullb0: Can't open blockdev [ 59.282375][ T6015] /dev/nullb0: Can't open blockdev [ 59.284367][ T6015] /dev/nullb0: Can't open blockdev [ 59.287488][ T6015] /dev/nullb0: Can't open blockdev [ 59.289617][ T6015] /dev/nullb0: Can't open blockdev [ 59.291553][ T6015] /dev/nullb0: Can't open blockdev [ 59.293482][ T6015] /dev/nullb0: Can't open blockdev [ 59.296053][ T6015] /dev/nullb0: Can't open blockdev [ 59.298369][ T6015] /dev/nullb0: Can't open blockdev [ 59.300313][ T6015] /dev/nullb0: Can't open blockdev [ 59.302226][ T6015] /dev/nullb0: Can't open blockdev [ 59.304115][ T6015] /dev/nullb0: Can't open blockdev [ 59.306002][ T6015] /dev/nullb0: Can't open blockdev [ 59.307901][ T6015] /dev/nullb0: Can't open blockdev [ 59.309727][ T6015] /dev/nullb0: Can't open blockdev [ 59.311564][ T6015] /dev/nullb0: Can't open blockdev [ 59.313489][ T6015] /dev/nullb0: Can't open blockdev [ 59.315517][ T6015] /dev/nullb0: Can't open blockdev [ 59.317820][ T6015] /dev/nullb0: Can't open blockdev [ 59.320319][ T6015] /dev/nullb0: Can't open blockdev [ 59.323776][ T6015] /dev/nullb0: Can't open blockdev [ 59.325686][ T6015] /dev/nullb0: Can't open blockdev [ 59.328578][ T6015] /dev/nullb0: Can't open blockdev [ 59.330473][ T6015] /dev/nullb0: Can't open blockdev [ 59.332342][ T6015] /dev/nullb0: Can't open blockdev [ 59.334357][ T6015] /dev/nullb0: Can't open blockdev [ 59.336236][ T6015] /dev/nullb0: Can't open blockdev [ 59.338189][ T6015] /dev/nullb0: Can't open blockdev [ 59.340022][ T6015] /dev/nullb0: Can't open blockdev [ 59.341889][ T6015] /dev/nullb0: Can't open blockdev [ 59.343766][ T6015] /dev/nullb0: Can't open blockdev [ 59.345678][ T6015] /dev/nullb0: Can't open blockdev [ 59.347618][ T6015] /dev/nullb0: Can't open blockdev [ 59.349494][ T6015] /dev/nullb0: Can't open blockdev [ 59.351400][ T6015] /dev/nullb0: Can't open blockdev [ 59.353292][ T6015] /dev/nullb0: Can't open blockdev [ 59.355163][ T6015] /dev/nullb0: Can't open blockdev [ 59.357105][ T6015] /dev/nullb0: Can't open blockdev [ 59.358970][ T6015] /dev/nullb0: Can't open blockdev [ 59.360876][ T6015] /dev/nullb0: Can't open blockdev [ 59.362789][ T6015] /dev/nullb0: Can't open blockdev [ 59.364642][ T6015] /dev/nullb0: Can't open blockdev [ 59.366539][ T6015] /dev/nullb0: Can't open blockdev [ 59.368480][ T6015] /dev/nullb0: Can't open blockdev [ 59.370339][ T6015] /dev/nullb0: Can't open blockdev [ 59.372203][ T6015] /dev/nullb0: Can't open blockdev [ 59.374323][ T6015] /dev/nullb0: Can't open blockdev [ 59.376537][ T6015] /dev/nullb0: Can't open blockdev [ 59.378534][ T6015] /dev/nullb0: Can't open blockdev [ 59.380345][ T6015] /dev/nullb0: Can't open blockdev [ 59.382186][ T6015] /dev/nullb0: Can't open blockdev [ 59.725191][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 59.728929][ T5741] Bluetooth: hci3: command tx timeout [ 60.076832][ T55] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 60.232276][ T55] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 60.233366][ T6091] netlink: 'syz.0.44': attribute type 1 has an invalid length. [ 60.238749][ T55] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.243161][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 122, changing to 10 [ 60.251714][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 18054, setting to 1024 [ 60.266889][ T55] usb 8-1: config 0 interface 0 has no altsetting 0 [ 60.272385][ T55] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.276289][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 122, changing to 10 [ 60.281097][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 18054, setting to 1024 [ 60.285862][ T55] usb 8-1: config 0 interface 0 has no altsetting 0 [ 60.290581][ T55] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.293449][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 122, changing to 10 [ 60.297492][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 18054, setting to 1024 [ 60.301996][ T55] usb 8-1: config 0 interface 0 has no altsetting 0 [ 60.304920][ T55] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.307766][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 122, changing to 10 [ 60.311136][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 18054, setting to 1024 [ 60.314509][ T55] usb 8-1: config 0 interface 0 has no altsetting 0 [ 60.317265][ T55] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.320057][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 122, changing to 10 [ 60.323502][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 18054, setting to 1024 [ 60.326997][ T55] usb 8-1: config 0 interface 0 has no altsetting 0 [ 60.329787][ T55] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.332489][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 122, changing to 10 [ 60.335763][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 18054, setting to 1024 [ 60.339146][ T55] usb 8-1: config 0 interface 0 has no altsetting 0 [ 60.341980][ T55] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.344844][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 122, changing to 10 [ 60.348432][ T6094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.349232][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 18054, setting to 1024 [ 60.355515][ T55] usb 8-1: config 0 interface 0 has no altsetting 0 [ 60.358820][ T55] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.361727][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 122, changing to 10 [ 60.365133][ T55] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 18054, setting to 1024 [ 60.368524][ T55] usb 8-1: config 0 interface 0 has no altsetting 0 [ 60.372408][ T55] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 60.375365][ T55] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 60.378141][ T5741] Bluetooth: hci0: command tx timeout [ 60.378164][ T65] Bluetooth: hci2: command tx timeout [ 60.379888][ T55] usb 8-1: Product: syz [ 60.381706][ T5751] Bluetooth: hci1: command tx timeout [ 60.382926][ T55] usb 8-1: Manufacturer: syz [ 60.386337][ T55] usb 8-1: SerialNumber: syz [ 60.392353][ T55] usb 8-1: config 0 descriptor?? [ 60.395908][ T6074] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 60.406443][ T6100] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 60.411627][ T55] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 60.602728][ T24] usb 8-1: USB disconnect, device number 2 [ 60.623784][ T24] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 60.686886][ T5744] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 60.687790][ T5751] Bluetooth: hci4: command 0x1003 tx timeout [ 60.792691][ T6107] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 61.490014][ T6141] bridge1: port 1(macvlan2) entered blocking state [ 61.492818][ T6141] bridge1: port 1(macvlan2) entered disabled state [ 61.496356][ T6141] macvlan2: entered allmulticast mode [ 61.548946][ T6150] syzkaller1: entered promiscuous mode [ 61.550794][ T6150] syzkaller1: entered allmulticast mode [ 61.646412][ T6157] fuse: Bad value for 'user_id' [ 61.650207][ T6157] fuse: Bad value for 'user_id' [ 61.817136][ T5744] Bluetooth: hci3: command tx timeout [ 61.932568][ T6171] binder: BINDER_SET_CONTEXT_MGR already set [ 61.935459][ T6171] binder: 6170:6171 ioctl 4018620d 200000000340 returned -16 [ 61.961772][ T6176] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 61.987761][ T6176] process 'syz.2.68' launched './file0' with NULL argv: empty string added [ 62.027034][ T41] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 62.167959][ T6186] xt_hashlimit: size too large, truncated to 1048576 [ 62.191304][ T41] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 62.194778][ T41] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 62.199653][ T41] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 62.202625][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.215286][ T6163] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 62.225703][ T41] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 62.288185][ T6194] No source specified [ 62.289862][ T6194] netlink: 'syz.0.74': attribute type 58 has an invalid length. [ 62.423264][ T6163] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 62.442336][ T6210] dummy_hcd dummy_hcd.0: remove, state 4 [ 62.443522][ T55] usb 8-1: USB disconnect, device number 3 [ 62.445077][ T6210] usb usb5: USB disconnect, device number 1 [ 62.447755][ T5744] Bluetooth: hci1: command tx timeout [ 62.447776][ T5744] Bluetooth: hci2: command tx timeout [ 62.447797][ T5744] Bluetooth: hci0: command tx timeout [ 62.510462][ T6210] dummy_hcd dummy_hcd.0: stopped [ 62.512402][ T6210] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 62.533290][ T6213] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 62.537782][ T6213] dummy_hcd dummy_hcd.0: Dummy host controller [ 62.540032][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.543010][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.545853][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.548819][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.551108][ T6213] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 5 [ 62.560386][ T6213] usb usb5: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 62.563468][ T6213] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 62.565911][ T6213] usb usb5: Product: Dummy host controller [ 62.567985][ T6213] usb usb5: Manufacturer: Linux syzkaller dummy_hcd [ 62.570343][ T6213] usb usb5: SerialNumber: dummy_hcd.0 [ 62.586866][ T6213] hub 5-0:1.0: USB hub found [ 62.590588][ T6213] hub 5-0:1.0: 1 port detected [ 62.649228][ T6207] ima: policy update failed [ 62.866784][ T6230] netlink: 'syz.2.86': attribute type 21 has an invalid length. [ 62.879171][ T6230] Bluetooth: MGMT ver 1.23 [ 62.881796][ T6230] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 62.945896][ T6240] __nla_validate_parse: 7 callbacks suppressed [ 62.945912][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 62.996305][ T6245] jfs: Unknown parameter 'usrquota?þÿÿ' [ 63.093944][ T5751] Bluetooth: hci2: unexpected subevent 0x19 length: 24 < 28 [ 63.318136][ T6271] netlink: 128 bytes leftover after parsing attributes in process `syz.3.96'. [ 63.343726][ T6273] fuse: fd is not a fuse device [ 63.435948][ T6286] netlink: 'syz.3.102': attribute type 1 has an invalid length. [ 63.457299][ T6286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.486369][ T6286] bond1: (slave veth3): Enslaving as an active interface with a down link [ 63.498989][ T6286] bond1: (slave dummy0): making interface the new active one [ 63.502698][ T6286] dummy0: entered promiscuous mode [ 63.506221][ T6286] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 63.513861][ T6286] EXT4-fs: Conflicting test_dummy_encryption options [ 63.594468][ T6293] ip6gretap0: entered promiscuous mode [ 63.729153][ T6302] gadgetfs: bound to dummy_udc driver [ 63.795641][ T6313] overlayfs: missing 'workdir' [ 63.852902][ T6318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.857623][ T6318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.966701][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 63.968782][ T42] kauditd_printk_skb: 93 callbacks suppressed [ 63.968794][ T42] audit: type=1400 audit(1785577961.455:372): avc: denied { read } for pid=6330 comm="syz.3.115" lport=49321 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 63.969376][ C0] gadgetfs: connected [ 63.980657][ T9] gadgetfs: disconnected [ 64.009685][ T42] audit: type=1400 audit(1785577961.495:373): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 64.022445][ T42] audit: type=1400 audit(1785577961.505:374): avc: denied { write } for pid=6330 comm="syz.3.115" lport=49321 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 64.038422][ T42] audit: type=1400 audit(1785577961.525:375): avc: denied { accept } for pid=6333 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.147832][ T42] audit: type=1400 audit(1785577961.635:376): avc: denied { bind } for pid=6335 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.186949][ T42] audit: type=1400 audit(1785577961.675:377): avc: denied { watch } for pid=6340 comm="syz.1.118" path="/31" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.250123][ T42] audit: type=1400 audit(1785577961.735:378): avc: denied { write } for pid=6342 comm="syz.1.119" name="/" dev="ocfs2_dlmfs" ino=11523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.251137][ T6343] (syz.1.119,6343,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 64.258346][ T42] audit: type=1400 audit(1785577961.735:379): avc: denied { add_name } for pid=6342 comm="syz.1.119" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.274123][ T42] audit: type=1400 audit(1785577961.735:380): avc: denied { create } for pid=6342 comm="syz.1.119" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 64.286299][ T42] audit: type=1400 audit(1785577961.735:381): avc: denied { associate } for pid=6342 comm="syz.1.119" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 64.306754][ T6345] fuse: Unknown parameter 'rootmodw' [ 64.494473][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'. [ 64.593684][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'. [ 64.813989][ T6360] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=50 sclass=netlink_xfrm_socket pid=6360 comm=syz.1.124 [ 64.880925][ T6368] netlink: 'syz.3.125': attribute type 10 has an invalid length. [ 64.888261][ T6368] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.892379][ T6368] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.901542][ T6368] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.904298][ T6368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.907157][ T6368] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.909807][ T6368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.919385][ T6368] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 65.549834][ T6383] bond1: ARP target 9.0.0.0 is already present [ 65.552591][ T6383] bond1: option arp_ip_target: invalid value (9) [ 65.558870][ T6383] bond1 (unregistering): Released all slaves [ 65.653844][ T6387] netlink: 44 bytes leftover after parsing attributes in process `syz.0.131'. [ 65.662890][ T6387] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.667404][ T6387] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.731717][ T6387] netlink: 32 bytes leftover after parsing attributes in process `syz.0.131'. [ 65.771299][ T6395] vlan2: entered allmulticast mode [ 65.890184][ T6400] misc userio: No port type given on /dev/userio [ 65.892513][ T6400] misc userio: The device must be registered before sending interrupts [ 65.895059][ T6400] misc userio: The device must be registered before sending interrupts [ 65.898871][ T6400] misc userio: The device must be registered before sending interrupts [ 65.901720][ T6400] misc userio: The device must be registered before sending interrupts [ 65.905948][ T6400] misc userio: The device must be registered before sending interrupts [ 65.910095][ T6400] misc userio: The device must be registered before sending interrupts [ 65.912739][ T6400] misc userio: The device must be registered before sending interrupts [ 65.916828][ T6400] misc userio: The device must be registered before sending interrupts [ 65.920192][ T6400] misc userio: The device must be registered before sending interrupts [ 65.923555][ T6400] misc userio: The device must be registered before sending interrupts [ 65.927142][ T6400] misc userio: The device must be registered before sending interrupts [ 65.930560][ T6400] misc userio: The device must be registered before sending interrupts [ 65.933926][ T6400] misc userio: The device must be registered before sending interrupts [ 65.938610][ T6400] misc userio: The device must be registered before sending interrupts [ 65.942076][ T6400] misc userio: The device must be registered before sending interrupts [ 65.945558][ T6400] misc userio: The device must be registered before sending interrupts [ 66.035326][ T6411] syzkaller1: entered promiscuous mode [ 66.043023][ T6411] syzkaller1: entered allmulticast mode [ 66.063647][ T6416] capability: warning: `syz.3.139' uses 32-bit capabilities (legacy support in use) [ 66.121092][ T6418] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 66.172096][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'. [ 66.191664][ T6424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.211294][ T6424] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 66.541853][ T6458] loop5: detected capacity change from 0 to 2640 [ 66.552008][ T5746] buffer_io_error: 10 callbacks suppressed [ 66.552019][ T5746] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.562274][ T6458] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 66.565337][ T6458] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 66.568509][ T6458] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 66.571764][ T6458] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 66.575116][ T6458] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 66.580609][ T6458] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 66.584136][ T6458] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 66.587596][ T6458] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 66.590834][ T6458] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 66.686924][ T5826] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 66.710456][ T6465] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 66.710456][ T6465] The task syz.1.153 (6465) triggered the difference, watch for misbehavior. [ 66.852965][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'. [ 66.859036][ T5826] usb 8-1: config 0 has no interfaces? [ 66.862949][ T5826] usb 8-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 66.866026][ T5826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.868914][ T5826] usb 8-1: Product: syz [ 66.870288][ T5826] usb 8-1: Manufacturer: syz [ 66.872117][ T5826] usb 8-1: SerialNumber: syz [ 66.875716][ T5826] usb 8-1: config 0 descriptor?? [ 66.903719][ T6479] netlink: 60 bytes leftover after parsing attributes in process `syz.1.159'. [ 67.057552][ T41] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 67.081504][ T55] usb 8-1: USB disconnect, device number 4 [ 67.159646][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 67.218247][ T41] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 67.221449][ T41] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 67.224464][ T41] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 67.227619][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.236051][ T41] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 67.249582][ T41] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 67.424100][ T6506] comedi comedi3: Minor 256 is invalid! [ 67.472664][ T6511] CUSE: info not properly terminated [ 67.726961][ T5826] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 67.878006][ T5826] usb 8-1: config 0 has no interfaces? [ 67.881971][ T5826] usb 8-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 67.884827][ T5826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.887884][ T5826] usb 8-1: Product: syz [ 67.889323][ T5826] usb 8-1: Manufacturer: syz [ 67.890793][ T5826] usb 8-1: SerialNumber: syz [ 67.897443][ T5826] usb 8-1: config 0 descriptor?? [ 68.110686][ T41] usb 8-1: USB disconnect, device number 5 [ 68.666917][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 68.686908][ T6548] team0: Device vlan2 is already an upper device of the team interface [ 68.901779][ T6555] bridge0: port 3(wlan1) entered blocking state [ 68.905331][ T6555] bridge0: port 3(wlan1) entered disabled state [ 68.909886][ T6555] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 68.917196][ T6555] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 68.921061][ T6555] bridge0: port 3(wlan1) entered blocking state [ 68.924413][ T6555] bridge0: port 3(wlan1) entered forwarding state [ 69.086031][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 69.086045][ T42] audit: type=1400 audit(1785577966.565:409): avc: denied { create } for pid=6568 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 69.094826][ T6569] overlayfs: conflicting options: userxattr,metacopy=on [ 69.097976][ T42] audit: type=1400 audit(1785577966.575:410): avc: denied { getopt } for pid=6568 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 69.131873][ T42] audit: type=1400 audit(1785577966.615:411): avc: denied { allowed } for pid=6573 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 69.152762][ T42] audit: type=1400 audit(1785577966.635:412): avc: denied { write } for pid=6574 comm="syz.0.189" name="/" dev="9p" ino=78395255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.162531][ T42] audit: type=1400 audit(1785577966.645:413): avc: denied { cmd } for pid=6573 comm="syz.1.190" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 69.174099][ T42] audit: type=1400 audit(1785577966.645:414): avc: denied { create } for pid=6574 comm="syz.0.189" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.185965][ T42] audit: type=1400 audit(1785577966.665:415): avc: denied { read append open } for pid=6574 comm="syz.0.189" path="/35/file0/cpuacct.usage_percpu" dev="9p" ino=78395433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.198212][ T42] audit: type=1400 audit(1785577966.685:416): avc: denied { lock } for pid=6574 comm="syz.0.189" path="/35/file0/cpuacct.usage_percpu" dev="9p" ino=78395433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.246358][ T6588] netlink: 64 bytes leftover after parsing attributes in process `syz.3.194'. [ 69.266770][ T6590] ip6t_srh: unknown srh invflags 4000 [ 69.269888][ T6590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6590 comm=syz.0.189 [ 69.293536][ T42] audit: type=1400 audit(2000000000.000:417): avc: denied { write } for pid=6593 comm="syz.3.196" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.294530][ T6594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=6594 comm=syz.3.196 [ 69.305380][ T42] audit: type=1400 audit(2000000000.000:418): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.423163][ T6602] netlink: 'syz.3.200': attribute type 1 has an invalid length. [ 69.443810][ T6602] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.470325][ T6602] bond2: (slave geneve2): making interface the new active one [ 69.475093][ T6602] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 69.594821][ T6606] netlink: 48 bytes leftover after parsing attributes in process `syz.1.201'. [ 69.675141][ T6610] netlink: 'syz.3.202': attribute type 1 has an invalid length. [ 69.700936][ T6610] 8021q: adding VLAN 0 to HW filter on device bond3 [ 69.705550][ T6030] bridge0: port 3(wlan1) entered disabled state [ 69.812959][ T34] usb 7-1: USB disconnect, device number 2 [ 69.832661][ T34] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 69.847319][ T34] spcp8x5 7-1:1.0: device disconnected [ 69.987726][ T6627] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 69.991979][ T6627] PKCS7: Only support pkcs7_signedData type [ 69.995308][ T6627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.207'. [ 70.006324][ T6627] evm: overlay not supported [ 70.008385][ T56] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 70.024132][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.207'. [ 70.187944][ T56] usb 6-1: config index 0 descriptor too short (expected 50, got 32) [ 70.191304][ T56] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.195010][ T56] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.200641][ T56] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 70.204503][ T56] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.219801][ T56] usb 6-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 70.225348][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.231870][ T56] usb 6-1: Product: syz [ 70.233672][ T56] usb 6-1: Manufacturer: syz [ 70.235567][ T56] usb 6-1: SerialNumber: syz [ 70.252086][ T56] usb_debug 6-1:1.0: debug converter detected [ 70.265005][ T56] usb 6-1: debug converter now attached to ttyUSB0 [ 70.420501][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'. [ 70.452140][ T6617] debug ttyUSB0: usb_serial_generic_write_start - error submitting urb: -90 [ 70.505449][ T6661] kernel read not supported for file /policy (pid: 6661 comm: syz.0.221) [ 70.512771][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'. [ 70.517230][ T6661] openvswitch: netlink: EtherType 0 is less than min 600 [ 70.561947][ T6671] capability: warning: `syz.0.224' uses deprecated v2 capabilities in a way that may be insecure [ 70.924265][ T6681] loop9: detected capacity change from 0 to 524287999 [ 70.932169][ T6681] ldm_validate_partition_table(): Disk read failed. [ 70.934940][ T6681] Dev loop9: unable to read RDB block 0 [ 70.937439][ T6681] loop9: unable to read partition table [ 70.939922][ T6681] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x) failed (rc=-5) [ 71.331896][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.335112][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.372561][ T6731] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.376776][ T6731] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.420854][ T6735] EXT4-fs (nbd3): unable to read superblock [ 72.484228][ T6740] netlink: 'syz.0.243': attribute type 2 has an invalid length. [ 72.496796][ T5845] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 72.527160][ T6742] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6742 comm=syz.0.245 [ 72.644209][ T6752] Mass Storage Function, version: 2009/09/11 [ 72.648673][ T6752] LUN: removable file: (no medium) [ 72.658487][ T6752] LUN: removable file: (no medium) [ 72.672289][ T5845] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 72.680396][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 72.683997][ T5845] usb 7-1: Product: syz [ 72.685530][ T5845] usb 7-1: Manufacturer: syz [ 72.687882][ T5845] usb 7-1: SerialNumber: syz [ 72.693663][ T5845] usb 7-1: config 0 descriptor?? [ 72.742161][ T6754] syzkaller0: entered promiscuous mode [ 72.744657][ T6754] syzkaller0: entered allmulticast mode [ 72.752454][ T6754] tipc: Started in network mode [ 72.755230][ T6754] tipc: Node identity 626f56f8698b, cluster identity 4711 [ 72.756482][ T5493] usb 6-1: USB disconnect, device number 2 [ 72.759144][ T6754] tipc: Enabled bearer , priority 0 [ 72.781827][ T5493] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 72.785066][ T5493] usb_debug 6-1:1.0: device disconnected [ 72.806483][ T6753] tipc: Resetting bearer [ 72.839960][ T6753] tipc: Disabling bearer [ 72.904956][ T6253] usb 7-1: USB disconnect, device number 3 [ 73.040067][ T6765] binder: 6764:6765 ioctl c018620c 200000000040 returned -22 [ 73.297435][ T6779] netlink: 'syz.0.257': attribute type 1 has an invalid length. [ 73.303756][ T6779] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 73.321910][ T6771] netlink: 'syz.3.254': attribute type 11 has an invalid length. [ 73.365485][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.258'. [ 73.483481][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 73.486493][ T6793] netlink: 'syz.1.262': attribute type 30 has an invalid length. [ 73.536110][ T6798] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 73.540897][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 73.543733][ T6799] netlink: 'syz.1.262': attribute type 30 has an invalid length. [ 73.647095][ T5826] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 73.742825][ T6814] __nla_validate_parse: 2 callbacks suppressed [ 73.742848][ T6814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.269'. [ 73.753902][ T6814] fuse: Unknown parameter 'r000040000' [ 73.779643][ T5826] usb 8-1: device descriptor read/64, error -71 [ 74.027673][ T5826] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 74.166739][ T5826] usb 8-1: device descriptor read/64, error -71 [ 74.178196][ T6832] warning: `syz.0.274' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.243383][ T42] kauditd_printk_skb: 65 callbacks suppressed [ 74.243402][ T42] audit: type=1400 audit(2000000004.940:484): avc: denied { search } for pid=6836 comm="syz.0.276" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.256778][ T42] audit: type=1400 audit(2000000004.940:485): avc: denied { search } for pid=6836 comm="syz.0.276" name="events" dev="tracefs" ino=2075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.269599][ T42] audit: type=1400 audit(2000000004.960:486): avc: denied { search } for pid=6836 comm="syz.0.276" name="netlink" dev="tracefs" ino=17448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.277061][ T5826] usb usb8-port1: attempt power cycle [ 74.279744][ T42] audit: type=1400 audit(2000000004.960:487): avc: denied { search } for pid=6836 comm="syz.0.276" name="netlink_extack" dev="tracefs" ino=17450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.293615][ T42] audit: type=1400 audit(2000000004.960:488): avc: denied { write } for pid=6836 comm="syz.0.276" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 74.304765][ T42] audit: type=1400 audit(2000000004.960:489): avc: denied { open } for pid=6836 comm="syz.0.276" path="/56/mnt/events/netlink/netlink_extack/trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 74.318613][ T6838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6838 comm=syz.1.275 [ 74.627384][ T12] dummy0: left promiscuous mode [ 74.637323][ T5826] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 74.669190][ T5826] usb 8-1: device descriptor read/8, error -71 [ 74.686820][ T55] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 74.771250][ T42] audit: type=1400 audit(2000000005.469:490): avc: denied { mounton } for pid=6863 comm="syz.0.285" path="/62/file0" dev="tmpfs" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 74.771308][ T6864] fuse: Unknown parameter 'gp_id' [ 74.786290][ T42] audit: type=1400 audit(2000000005.479:491): avc: denied { mmap_zero } for pid=6863 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 74.794057][ T42] audit: type=1400 audit(2000000005.489:492): avc: denied { create } for pid=6863 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.839034][ T55] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 74.842532][ T55] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.846523][ T55] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.850867][ T55] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.856894][ T55] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.860046][ T55] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.863227][ T55] usb 7-1: Product: syz [ 74.864892][ T55] usb 7-1: Manufacturer: syz [ 74.874741][ T55] cdc_wdm 7-1:1.0: skipping garbage [ 74.876554][ T55] cdc_wdm 7-1:1.0: skipping garbage [ 74.882909][ T55] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 74.885374][ T55] cdc_wdm 7-1:1.0: Unknown control protocol [ 74.916884][ T5826] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 74.938613][ T5826] usb 8-1: device descriptor read/8, error -71 [ 75.048658][ T5826] usb usb8-port1: unable to enumerate USB device [ 75.076763][ T55] usb 7-1: USB disconnect, device number 4 [ 75.213728][ T6872] befs: (nullb0): No write support. Marking filesystem read-only [ 75.219331][ T6872] befs: (nullb0): invalid magic header [ 75.364944][ T42] audit: type=1400 audit(2000000006.059:493): avc: denied { watch_reads } for pid=6878 comm="syz.1.289" path="/86/control" dev="tmpfs" ino=475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.421233][ T6882] xt_l2tp: wrong L2TP version: 0 [ 75.523102][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 75.548219][ T41] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 75.612197][ T6886] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 75.712376][ T41] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 75.718327][ T41] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.726229][ T41] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 75.730926][ T41] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.737489][ T41] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 75.741083][ T41] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 75.743245][ T6891] netlink: 'syz.1.294': attribute type 9 has an invalid length. [ 75.744235][ T41] usb 7-1: Product: syz [ 75.747464][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 75.749236][ T41] usb 7-1: Manufacturer: syz [ 75.764531][ T41] cdc_wdm 7-1:1.0: skipping garbage [ 75.766816][ T41] cdc_wdm 7-1:1.0: skipping garbage [ 75.783481][ T41] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 75.785973][ T41] cdc_wdm 7-1:1.0: Unknown control protocol [ 75.860549][ T6893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.295'. [ 76.036723][ T55] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 76.199526][ T55] usb 6-1: not running at top speed; connect to a high speed hub [ 76.205626][ T55] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 76.206630][ T5493] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 76.209751][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 76.214874][ T55] usb 6-1: Product: syz [ 76.216755][ T55] usb 6-1: Manufacturer: syz [ 76.227591][ T55] usb 6-1: USB2VGA dongle found at address 3 [ 76.232844][ T55] usb 6-1: Allocated 8 output buffers [ 76.235443][ T55] usb 6-1: Not attached to USB 2.0 hub, deferring init [ 76.368848][ T5493] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.372137][ T5493] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 76.375399][ T5493] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 76.378877][ T5493] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 76.381674][ T5493] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.390615][ T6897] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 76.394055][ T5493] hub 5-1:1.0: bad descriptor, ignoring hub [ 76.395958][ T5493] hub 5-1:1.0: probe with driver hub failed with error -5 [ 76.398552][ T5493] cdc_wdm 5-1:1.0: skipping garbage [ 76.400141][ T5493] cdc_wdm 5-1:1.0: skipping garbage [ 76.405998][ T5493] cdc_wdm 5-1:1.0: cdc-wdm2: USB WDM device [ 76.408121][ T5493] cdc_wdm 5-1:1.0: Unknown control protocol [ 76.484156][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 76.486374][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 76.489632][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 76.491909][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 76.493902][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 76.496950][ T55] usb 7-1: USB disconnect, device number 5 [ 76.508496][ T6894] overlayfs: failed to verify upper (90/file1, ino=496, err=-116) [ 76.512136][ T6894] overlayfs: failed to verify index dir 'upper' xattr [ 76.514939][ T6894] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 76.627273][ T6908] exFAT-fs (nullb0): invalid boot record signature [ 76.630322][ T6908] exFAT-fs (nullb0): failed to read boot sector [ 76.632778][ T6908] exFAT-fs (nullb0): failed to recognize exfat type [ 76.706869][ T56] usb 5-1: USB disconnect, device number 3 [ 76.741822][ T6915] Bluetooth: MGMT ver 1.23 [ 76.747827][ T6917] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 76.927765][ T6922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.305'. [ 77.047485][ T56] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 77.188970][ T6935] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 77.206842][ T6936] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 77.229236][ T56] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.232544][ T56] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 77.235383][ T56] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 77.239076][ T56] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 77.242350][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.248788][ T6897] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 77.252904][ T56] hub 5-1:1.0: bad descriptor, ignoring hub [ 77.255473][ T56] hub 5-1:1.0: probe with driver hub failed with error -5 [ 77.261052][ T56] cdc_wdm 5-1:1.0: skipping garbage [ 77.265061][ T56] cdc_wdm 5-1:1.0: skipping garbage [ 77.270138][ T56] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 77.272188][ T56] cdc_wdm 5-1:1.0: Unknown control protocol [ 77.347876][ T6947] ip6gretap0: entered promiscuous mode [ 77.355816][ T6947] Bluetooth: MGMT ver 1.23 [ 77.386999][ T6949] EXT4-fs (nbd2): unable to read superblock [ 77.393120][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'. [ 77.461921][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.466822][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.474368][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.480266][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.819749][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.317'. [ 78.434313][ T56] usb 6-1: USB disconnect, device number 3 [ 78.813371][ T6983] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 78.986069][ T6992] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 79.129994][ T7000] fuse: Bad value for 'group_id' [ 79.133864][ T7000] fuse: Bad value for 'group_id' [ 80.941280][ T6953] cdc_wdm 5-1:1.0: Error autopm - -16 [ 80.941474][ T9] usb 5-1: USB disconnect, device number 4 [ 80.976712][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 80.976724][ T42] audit: type=1400 audit(2000524299.600:515): avc: denied { ioctl } for pid=7014 comm="syz.2.334" path="/dev/ppp" dev="devtmpfs" ino=731 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.677672][ T10] cfg80211: failed to load regulatory.db [ 81.739896][ T42] audit: type=1400 audit(2000524300.340:516): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 81.774224][ T42] audit: type=1400 audit(2000524300.369:517): avc: denied { connect } for pid=7022 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.125327][ T7034] tipc: Enabling of bearer rejected, failed to enable media [ 82.139316][ T7034] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 82.143505][ T7034] tipc: Enabled bearer , priority 10 [ 83.381773][ T10] tipc: Node number set to 199513848 [ 84.522063][ T7059] bridge0: port 3(wlan1) entered blocking state [ 84.524415][ T7059] bridge0: port 3(wlan1) entered disabled state [ 84.527111][ T7059] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 84.534899][ T7059] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 84.899888][ T42] audit: type=1400 audit(2000524303.425:518): avc: denied { mounton } for pid=7068 comm="syz.3.349" path="/101/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 84.927099][ T7069] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 84.929028][ T42] audit: type=1400 audit(2000524303.454:519): avc: denied { write } for pid=7068 comm="syz.3.349" name="/" dev="9p" ino=78395255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.984392][ T42] audit: type=1400 audit(2000524303.454:520): avc: denied { append } for pid=7068 comm="syz.3.349" name="file0" dev="9p" ino=78395369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 85.034761][ T42] audit: type=1400 audit(2000524303.454:521): avc: denied { open } for pid=7068 comm="syz.3.349" path="/101/file0/file0" dev="9p" ino=78395369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 85.523935][ T7073] netlink: 'syz.1.351': attribute type 1 has an invalid length. [ 85.526277][ T7073] netlink: 756 bytes leftover after parsing attributes in process `syz.1.351'. [ 86.561375][ T42] audit: type=1400 audit(2000524305.032:522): avc: denied { connect } for pid=7079 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.687018][ T42] audit: type=1400 audit(2000524305.169:523): avc: denied { append } for pid=7079 comm="syz.0.354" name="001" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.985276][ T7086] binder: 7085:7086 ioctl 8140aecc 200000000300 returned -22 [ 86.988799][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'. [ 87.173890][ T7089] overlayfs: conflicting lowerdir path [ 89.149591][ T7096] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 90.417872][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.361'. [ 90.421314][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.361'. [ 90.569985][ T42] audit: type=1400 audit(2000524308.993:524): avc: denied { ioctl } for pid=7104 comm="syz.0.362" path="socket:[17191]" dev="sockfs" ino=17191 ioctlcmd=0x583d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.064012][ T42] audit: type=1400 audit(2000524309.486:525): avc: denied { read } for pid=7108 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.108939][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.364'. [ 91.123926][ T7109] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 91.270626][ T42] audit: type=1400 audit(2000524309.683:526): avc: denied { map } for pid=7122 comm="syz.3.363" path="/dev/comedi4" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.283061][ T7126] netlink: 56 bytes leftover after parsing attributes in process `syz.3.363'. [ 92.137588][ T42] audit: type=1400 audit(2000524310.541:527): avc: denied { create } for pid=7144 comm="syz.1.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 92.478970][ C1] sched: DL replenish lagged too much [ 93.252918][ T42] audit: type=1400 audit(2000524311.637:528): avc: denied { getopt } for pid=7155 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.556221][ T42] audit: type=1400 audit(2000524311.943:529): avc: denied { create } for pid=7162 comm="syz.0.378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=llc_socket permissive=1 [ 93.575231][ T42] audit: type=1400 audit(2000524311.953:530): avc: denied { create } for pid=7162 comm="syz.0.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.621677][ T7183] vhci_hcd vhci_hcd.0: remove, state 4 [ 94.626325][ T7183] usb usb38: USB disconnect, device number 1 [ 94.719060][ T13] vhci_hcd vhci_hcd.0: stop threads [ 94.721055][ T13] vhci_hcd vhci_hcd.0: release socket [ 94.739072][ T7183] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 94.749927][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 94.765404][ T13] vhci_hcd vhci_hcd.0: stop threads [ 94.778485][ T13] vhci_hcd vhci_hcd.0: release socket [ 94.791929][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 94.793983][ T13] vhci_hcd vhci_hcd.0: stop threads [ 94.804348][ T7183] vhci_hcd vhci_hcd.0: remove, state 4 [ 94.815886][ T13] ================================================================== [ 94.818883][ T13] BUG: KASAN: slab-use-after-free in vhci_shutdown_connection.cold+0x2f1/0x37c [ 94.822032][ T13] Read of size 8 at addr ffff88802c4809d0 by task kworker/u32:1/13 [ 94.826387][ T13] [ 94.827251][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.827272][ T13] Tainted: [L]=SOFTLOCKUP [ 94.827276][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.827286][ T13] Workqueue: usbip_event event_handler [ 94.827306][ T13] Call Trace: [ 94.827311][ T13] [ 94.827317][ T13] dump_stack_lvl+0x100/0x190 [ 94.827349][ T13] print_report+0x13d/0x4b0 [ 94.827378][ T13] ? __virt_addr_valid+0x239/0x430 [ 94.827403][ T13] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 94.827426][ T13] kasan_report+0xdf/0x1c0 [ 94.827452][ T13] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 94.827475][ T13] vhci_shutdown_connection.cold+0x2f1/0x37c [ 94.827498][ T13] event_handler+0x216/0x570 [ 94.827512][ T13] process_one_work+0xa23/0x1940 [ 94.827531][ T13] ? __pfx_process_one_work+0x10/0x10 [ 94.827548][ T13] ? __pfx_event_handler+0x10/0x10 [ 94.827562][ T13] worker_thread+0x5ef/0xe50 [ 94.827580][ T13] ? kthread+0x13a/0x450 [ 94.827598][ T13] ? __pfx_worker_thread+0x10/0x10 [ 94.827612][ T13] kthread+0x370/0x450 [ 94.827625][ T13] ? __pfx_kthread+0x10/0x10 [ 94.827638][ T13] ret_from_fork+0x72b/0xd50 [ 94.827659][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 94.827678][ T13] ? __switch_to+0x800/0x10f0 [ 94.827692][ T13] ? __pfx_kthread+0x10/0x10 [ 94.827706][ T13] ret_from_fork_asm+0x1a/0x30 [ 94.827729][ T13] [ 94.827734][ T13] [ 94.833408][ T7183] usb usb37: USB disconnect, device number 1 [ 94.836617][ T13] Allocated by task 1: [ 94.836629][ T13] kasan_save_stack+0x30/0x50 [ 94.885399][ T13] kasan_save_track+0x14/0x30 [ 94.887080][ T13] __kasan_kmalloc+0xaa/0xb0 [ 94.888758][ T13] __kmalloc_noprof+0x322/0x820 [ 94.890551][ T13] __usb_create_hcd+0x5e/0xac0 [ 94.895292][ T13] vhci_hcd_probe+0x1a5/0x4e0 [ 94.897032][ T13] platform_probe+0x106/0x1d0 [ 94.898757][ T13] really_probe+0x241/0xa60 [ 94.900439][ T13] __driver_probe_device+0x20e/0x450 [ 94.902369][ T13] driver_probe_device+0x4a/0x140 [ 94.904206][ T13] __device_attach_driver+0x1df/0x320 [ 94.906167][ T13] bus_for_each_drv+0x159/0x1e0 [ 94.907877][ T13] __device_attach+0x1e4/0x4d0 [ 94.909556][ T13] device_initial_probe+0xaf/0xd0 [ 94.911174][ T13] bus_probe_device+0x64/0x160 [ 94.912950][ T13] device_add+0x121d/0x1970 [ 94.914401][ T13] platform_device_add+0x35a/0x800 [ 94.915994][ T13] platform_device_register_full+0x5cf/0x830 [ 94.917843][ T13] vhci_hcd_init+0x1a1/0x2f0 [ 94.919289][ T13] do_one_initcall+0x11d/0x700 [ 94.920986][ T13] kernel_init_freeable+0x6ea/0x7b0 [ 94.922656][ T13] kernel_init+0x1f/0x1e0 [ 94.924010][ T13] ret_from_fork+0x72b/0xd50 [ 94.925405][ T13] ret_from_fork_asm+0x1a/0x30 [ 94.926821][ T13] [ 94.927565][ T13] Freed by task 7183: [ 94.928812][ T13] kasan_save_stack+0x30/0x50 [ 94.930295][ T13] kasan_save_track+0x14/0x30 [ 94.931770][ T13] kasan_save_free_info+0x3b/0x70 [ 94.933281][ T13] __kasan_slab_free+0x5f/0x80 [ 94.934729][ T13] kfree+0x22b/0x6c0 [ 94.935935][ T13] usb_put_hcd+0x149/0x1f0 [ 94.937278][ T13] vhci_hcd_remove+0xb5/0x1b0 [ 94.938758][ T13] platform_remove+0x5f/0x80 [ 94.940438][ T13] device_remove+0xcb/0x180 [ 94.942193][ T13] device_release_driver_internal+0x44e/0x620 [ 94.944176][ T13] unbind_store+0xf8/0x110 [ 94.945661][ T13] drv_attr_store+0x74/0xb0 [ 94.947130][ T13] sysfs_kf_write+0xf2/0x150 [ 94.948606][ T13] kernfs_fop_write_iter+0x3e0/0x5f0 [ 94.950214][ T13] vfs_write+0x6ac/0x1050 [ 94.951592][ T13] ksys_write+0x12a/0x250 [ 94.952920][ T13] do_syscall_64+0x115/0x870 [ 94.954348][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.956168][ T13] [ 94.957012][ T13] Last potentially related work creation: [ 94.958694][ T13] kasan_save_stack+0x30/0x50 [ 94.960127][ T13] kasan_record_aux_stack+0xa7/0xc0 [ 94.961759][ T13] insert_work+0x36/0x230 [ 94.963126][ T13] __queue_work+0x9bc/0x12b0 [ 94.964604][ T13] queue_work_on+0x1a9/0x1e0 [ 94.966071][ T13] usb_hcd_giveback_urb+0x330/0x4a0 [ 94.967785][ T13] unlink1+0x418/0x510 [ 94.969030][ T13] usb_hcd_unlink_urb+0x131/0x210 [ 94.970647][ T13] usb_kill_urb+0x121/0x320 [ 94.971994][ T13] hub_quiesce+0x1e9/0x320 [ 94.973373][ T13] hub_suspend+0x4ab/0x9e0 [ 94.974706][ T13] usb_suspend_both+0x288/0x950 [ 94.976157][ T13] usb_runtime_suspend+0x49/0x120 [ 94.977968][ T13] __rpm_callback+0xc8/0x620 [ 94.979776][ T13] rpm_callback+0x16a/0x1b0 [ 94.981504][ T13] rpm_suspend+0x2f4/0x11a0 [ 94.982926][ T13] __pm_runtime_suspend+0xba/0x1a0 [ 94.984735][ T13] usb_new_device.cold+0xd61/0x115c [ 94.986984][ T13] register_root_hub+0x4e6/0x639 [ 94.988818][ T13] usb_add_hcd.cold+0xccd/0x1158 [ 94.990419][ T13] vhci_hcd_probe+0x1c2/0x4e0 [ 94.991909][ T13] platform_probe+0x106/0x1d0 [ 94.993449][ T13] really_probe+0x241/0xa60 [ 94.994916][ T13] __driver_probe_device+0x20e/0x450 [ 94.996615][ T13] driver_probe_device+0x4a/0x140 [ 94.998338][ T13] __device_attach_driver+0x1df/0x320 [ 95.000040][ T13] bus_for_each_drv+0x159/0x1e0 [ 95.001601][ T13] __device_attach+0x1e4/0x4d0 [ 95.003297][ T13] device_initial_probe+0xaf/0xd0 [ 95.005420][ T13] bus_probe_device+0x64/0x160 [ 95.007427][ T13] device_add+0x121d/0x1970 [ 95.009367][ T13] platform_device_add+0x35a/0x800 [ 95.011529][ T13] platform_device_register_full+0x5cf/0x830 [ 95.013984][ T13] vhci_hcd_init+0x1a1/0x2f0 [ 95.015958][ T13] do_one_initcall+0x11d/0x700 [ 95.018031][ T13] kernel_init_freeable+0x6ea/0x7b0 [ 95.020225][ T13] kernel_init+0x1f/0x1e0 [ 95.022075][ T13] ret_from_fork+0x72b/0xd50 [ 95.024035][ T13] ret_from_fork_asm+0x1a/0x30 [ 95.025906][ T13] [ 95.026700][ T13] Second to last potentially related work creation: [ 95.028777][ T13] kasan_save_stack+0x30/0x50 [ 95.030298][ T13] kasan_record_aux_stack+0xa7/0xc0 [ 95.031938][ T13] insert_work+0x36/0x230 [ 95.033299][ T13] __queue_work+0x9bc/0x12b0 [ 95.034713][ T13] queue_work_on+0x1a9/0x1e0 [ 95.036110][ T13] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 95.037923][ T13] usb_hcd_submit_urb+0xab7/0x2150 [ 95.039823][ T13] usb_submit_urb+0x827/0x19b0 [ 95.041725][ T13] usb_start_wait_urb+0x10e/0x580 [ 95.043582][ T13] usb_control_msg+0x328/0x4b0 [ 95.045125][ T13] hub_suspend+0x826/0x9e0 [ 95.046552][ T13] usb_suspend_both+0x288/0x950 [ 95.048225][ T13] usb_runtime_suspend+0x49/0x120 [ 95.049832][ T13] __rpm_callback+0xc8/0x620 [ 95.051295][ T13] rpm_callback+0x16a/0x1b0 [ 95.052745][ T13] rpm_suspend+0x2f4/0x11a0 [ 95.054209][ T13] __pm_runtime_suspend+0xba/0x1a0 [ 95.055823][ T13] usb_new_device.cold+0xd61/0x115c [ 95.057791][ T13] register_root_hub+0x4e6/0x639 [ 95.059770][ T13] usb_add_hcd.cold+0xccd/0x1158 [ 95.061837][ T13] vhci_hcd_probe+0x1c2/0x4e0 [ 95.063766][ T13] platform_probe+0x106/0x1d0 [ 95.065647][ T13] really_probe+0x241/0xa60 [ 95.067531][ T13] __driver_probe_device+0x20e/0x450 [ 95.069718][ T13] driver_probe_device+0x4a/0x140 [ 95.071804][ T13] __device_attach_driver+0x1df/0x320 [ 95.073992][ T13] bus_for_each_drv+0x159/0x1e0 [ 95.075995][ T13] __device_attach+0x1e4/0x4d0 [ 95.078006][ T13] device_initial_probe+0xaf/0xd0 [ 95.079949][ T13] bus_probe_device+0x64/0x160 [ 95.081976][ T13] device_add+0x121d/0x1970 [ 95.083893][ T13] platform_device_add+0x35a/0x800 [ 95.086007][ T13] platform_device_register_full+0x5cf/0x830 [ 95.088470][ T13] vhci_hcd_init+0x1a1/0x2f0 [ 95.090414][ T13] do_one_initcall+0x11d/0x700 [ 95.092393][ T13] kernel_init_freeable+0x6ea/0x7b0 [ 95.094582][ T13] kernel_init+0x1f/0x1e0 [ 95.096388][ T13] ret_from_fork+0x72b/0xd50 [ 95.097865][ T13] ret_from_fork_asm+0x1a/0x30 [ 95.099392][ T13] [ 95.100211][ T13] The buggy address belongs to the object at ffff88802c480000 [ 95.100211][ T13] which belongs to the cache kmalloc-8k of size 8192 [ 95.104398][ T13] The buggy address is located 2512 bytes inside of [ 95.104398][ T13] freed 8192-byte region [ffff88802c480000, ffff88802c482000) [ 95.108721][ T13] [ 95.109474][ T13] The buggy address belongs to the physical page: [ 95.111447][ T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c480 [ 95.114190][ T13] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 95.116893][ T13] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 95.119265][ T13] page_type: f5(slab) [ 95.120610][ T13] raw: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 95.123303][ T13] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 95.125974][ T13] head: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 95.129370][ T13] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 95.132516][ T13] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 95.135242][ T13] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 95.138342][ T13] page dumped because: kasan: bad access detected [ 95.140955][ T13] page_owner tracks the page as allocated [ 95.143289][ T13] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 61, tgid 61 (kworker/u33:3), ts 9262927180, free_ts 9218794189 [ 95.151732][ T13] post_alloc_hook+0xfd/0x120 [ 95.153741][ T13] get_page_from_freelist+0xf48/0x3530 [ 95.156018][ T13] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 95.158339][ T13] new_slab+0xa2/0x640 [ 95.159953][ T13] refill_objects+0xe3/0x410 [ 95.161957][ T13] __pcs_replace_empty_main+0x376/0x680 [ 95.164251][ T13] __kmalloc_noprof+0x66d/0x820 [ 95.166251][ T13] ehci_setup+0xc12/0x1d90 [ 95.168145][ T13] ehci_pci_setup+0x284/0x10f0 [ 95.170191][ T13] usb_add_hcd.cold+0x660/0x1158 [ 95.172296][ T13] usb_hcd_pci_probe+0x7b6/0xcb0 [ 95.174401][ T13] ehci_pci_probe+0x35/0x50 [ 95.176336][ T13] local_pci_probe+0xdd/0x1b0 [ 95.178332][ T13] pci_call_probe+0x176/0x800 [ 95.180325][ T13] pci_device_probe+0x1cd/0x370 [ 95.182380][ T13] really_probe+0x241/0xa60 [ 95.184320][ T13] page last free pid 41 tgid 41 stack trace: [ 95.186800][ T13] free_pages_prepare+0x586/0xd80 [ 95.188883][ T13] __free_contig_range_common+0x14f/0x250 [ 95.191224][ T13] free_pages_bulk+0x12a/0x200 [ 95.193162][ T13] vm_area_free_pages+0xad/0x2b0 [ 95.195180][ T13] vfree+0x107/0x750 [ 95.196843][ T13] delayed_vfree_work+0x56/0x80 [ 95.198897][ T13] process_one_work+0xa23/0x1940 [ 95.201002][ T13] worker_thread+0x5ef/0xe50 [ 95.202971][ T13] kthread+0x370/0x450 [ 95.204697][ T13] ret_from_fork+0x72b/0xd50 [ 95.206653][ T13] ret_from_fork_asm+0x1a/0x30 [ 95.208683][ T13] [ 95.209695][ T13] Memory state around the buggy address: [ 95.212010][ T13] ffff88802c480880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.215302][ T13] ffff88802c480900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.218534][ T13] >ffff88802c480980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.221732][ T13] ^ [ 95.224433][ T13] ffff88802c480a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.227737][ T13] ffff88802c480a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.231090][ T13] ================================================================== [ 95.305395][ T42] audit: type=1400 audit(2000524313.672:531): avc: denied { ioctl } for pid=7189 comm="syz.2.385" path="socket:[20987]" dev="sockfs" ino=20987 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.383366][ T13] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.386473][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.390997][ T13] Tainted: [L]=SOFTLOCKUP [ 95.392838][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.397009][ T13] Workqueue: usbip_event event_handler [ 95.399293][ T13] Call Trace: [ 95.400662][ T13] [ 95.401853][ T13] dump_stack_lvl+0x100/0x190 [ 95.403779][ T13] vpanic+0x552/0x970 [ 95.405390][ T13] ? __pfx_vpanic+0x10/0x10 [ 95.407210][ T13] ? mark_held_locks+0x40/0x70 [ 95.409219][ T13] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 95.411783][ T13] panic+0xd1/0xe0 [ 95.413399][ T13] ? __pfx_panic+0x10/0x10 [ 95.415283][ T13] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 95.417850][ T13] ? preempt_schedule_common+0x42/0xc0 [ 95.420096][ T13] ? check_panic_on_warn+0x1f/0x90 [ 95.422280][ T13] check_panic_on_warn.cold+0x19/0x34 [ 95.424548][ T13] end_report.part.0+0x3a/0x90 [ 95.426597][ T13] kasan_report.cold+0xe/0x18 [ 95.428609][ T13] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 95.431228][ T13] vhci_shutdown_connection.cold+0x2f1/0x37c [ 95.433743][ T13] event_handler+0x216/0x570 [ 95.435692][ T13] process_one_work+0xa23/0x1940 [ 95.437718][ T13] ? __pfx_process_one_work+0x10/0x10 [ 95.439856][ T13] ? __pfx_event_handler+0x10/0x10 [ 95.441970][ T13] worker_thread+0x5ef/0xe50 [ 95.443906][ T13] ? kthread+0x13a/0x450 [ 95.445646][ T13] ? __pfx_worker_thread+0x10/0x10 [ 95.447687][ T13] kthread+0x370/0x450 [ 95.449419][ T13] ? __pfx_kthread+0x10/0x10 [ 95.451391][ T13] ret_from_fork+0x72b/0xd50 [ 95.453362][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 95.455511][ T13] ? __switch_to+0x800/0x10f0 [ 95.457452][ T13] ? __pfx_kthread+0x10/0x10 [ 95.459412][ T13] ret_from_fork_asm+0x1a/0x30 [ 95.461548][ T13] [ 95.464485][ T13] Kernel Offset: disabled [ 95.466260][ T13] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:53:12 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a394b5 RDI=ffffffff9ba09b40 RBP=ffffffff9ba09b00 RSP=ffffc900001075d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000066 R14=ffffffff9b6fc20e R15=ffffffff85a39450 RIP=ffffffff85a394df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f493b3556c8 CR3=0000000051a5c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9e08d130 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697372756365 725f64656772656d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9e08e3a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9e08e3a6 00007fff9e08e3ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f19338355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f193383562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1933835793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1933835621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff91bd1476 RDX=0000000000000008 RSI=0000000000000001 RDI=ffffc900006a01c8 RBP=ffffffffffffffd8 RSP=ffffc900006a0158 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=0000000000004e72 R12=ffffc900006a0218 R13=ffffc900006a01c8 R14=ffffc90006dafb98 R15=ffffc900006a01fc RIP=ffffffff81b87846 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f792cfda6c0 ffffffff 00c00000 GS =0000 ffff8880d5eda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2ceaa1 CR3=0000000057bf1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000050 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f493b35d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe85e7ad56 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe85e7ad56 00007ffe85e7ad5c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f493a6355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f493a63562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f493a635793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f493a635621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f493a7f2600 00007f493a7f25e0 00007f493a7f25e8 00007f493a7f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00080000000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f493a7f25f8 00007f493a7f25c8 00007f493a7f2600 00007f493a7f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000f0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000007 RBX=0000000000000009 RCX=0000000000000007 RDX=0000000000000008 RSI=ffff88801f2eb158 RDI=ffff88801f2ea540 RBP=ffffc90000648800 RSP=ffffc90000648760 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000002 R11=0000000000000003 R12=ffff88801f2eb158 R13=ffff88801f2ea540 R14=0000000000000200 R15=0000000000000003 RIP=ffffffff81e5cc52 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8626f08ff8 CR3=000000000e994000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 140da9230f06d5da b57354c041951cf4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7dda755b56890ec0 2f1451867653fa9f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f2515d7c74b7720c b53c5341e416492d ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f9c987963be13b22 016eefd59472cb27 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004b40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 48d2f00448d5fb9c 0000003a48d75008 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010000800100 0080010048d81f86 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003a00800100 48d3ce9a0000003a ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 008001000000003a 0000003a00800100 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 81336ac450c31073 fa8d20da5c67f196 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc0d0d71cfd40deb 9d7837afe6d3abcc ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f86261f25f8 00007f86261f25c8 00007f86261f2600 00007f86261f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8a20b7f7 RDX=ffff88801fa84a80 RSI=ffffffff8a20b80f RDI=ffff88801fa84a80 RBP=dffffc0000000000 RSP=ffffc900006cf088 R8 =0000000000000004 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000140 R13=ffff888013c52858 R14=ffff888013c52850 R15=ffff88802cd9a000 RIP=ffffffff8bbef2e0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055fa8d6a0330 CR3=000000003c19a000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000015422003 Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000004000010015 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000001100010015 0000000900000050 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000600000048 0000000000000006 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 00001fff01000045 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000f00000054 0000000000000050 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000c 0000000400000024 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004400010015 0000000200000048 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6168730073257325 7325204650420050 5241006e65706f5f 667062203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444d560056005600 5600054650420050 5241004b40554a5f 435547051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000b7effffffff ffffffff00060014 eada6608048ac098 00000000000080fe ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 00000b7e00000b7e ffffffffffffffff 00060014eada6608 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 048ac09800000000 000080fe00010014 00000005fd80400a c376a2966a6dc1c9 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 00000b4300000b43 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000600144a6165e0 becc472900000000 000080fe00010014 00000003fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3432003734325f5f 2066655f20696220 2035322020353220 38340a2035320a00 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000